Lucene search
HistoryJun 27, 2007 - 12:30 a.m.
CVE-2007-3449
cve-2007-3449
sql injection
6alblog
member.php
remote attackers
arbitrary commands
8.4 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.009 Low
EPSS
Percentile
82.8%
SQL injection vulnerability in member.php in 6ALBlog allows remote attackers to execute arbitrary SQL commands via the newsid parameter.
Affected configurations
Node
gorani_network6alblog
| CPE | Name | Operator | Version |
|---|---|---|---|
| gorani_network:6alblog | gorani network 6alblog | eq | * |
Related
nvd
nvd
CVE-2007-3449
2007-06-27 00:30:00
cvelist
cvelist
CVE-2007-3449
2007-06-27 00:00:00
prion
prion
Sql injection
2007-06-27 00:30:00
8.4 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.009 Low
EPSS
Percentile
82.8%
Related for CVE-2007-3449